DMARC is set to monitor-only (p=none)
infoThe DMARC record on boothsprout.com uses p=none, which only reports spoofing — it doesn't stop it. Forged mail claiming to be from your domain is still delivered.
Grade A — 1 minor.
passive scan · the deep checks need you signed in · scanned 1d ago
This is a passive website security report for app.boothsprout.com, graded A (98/100). We checked its SSL certificate, HTTP security headers, DNS records, email spoofing protection and publicly exposed files — the same surface a browser and a search engine already see.
We found 1 issue on this scan — each has a plain-English explanation and a copy-paste fix below.
Not your site?
The DMARC record on boothsprout.com uses p=none, which only reports spoofing — it doesn't stop it. Forged mail claiming to be from your domain is still delivered.
Sign up to fix these — then run the checks a passive scan can't. The stuff that actually gets vibe-coded apps hacked:
free for your first app · no card
Not app.boothsprout.com? Scan your own site free →